If scripts that run on the web node shoul slways be able to send trough the mail node, then you can add the ip address of the web node in the mynetworks line in main.cf on the mail node. This will allow scripts from web node to send trough the mail node without needinf smtp authentication.